Analysis
-
max time kernel
123s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28-03-2024 12:35
Behavioral task
behavioral1
Sample
05bfe2de09e515610ceed265ef605583_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
05bfe2de09e515610ceed265ef605583_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
05bfe2de09e515610ceed265ef605583_JaffaCakes118.pdf
-
Size
84KB
-
MD5
05bfe2de09e515610ceed265ef605583
-
SHA1
70eac3a97bf33fac4b79a3ff9c0e5667536bc41f
-
SHA256
9bcec4c47dba4232f3fd67c05308eb8e6395ce13f2268f66d2f9940a1e087b00
-
SHA512
9e7dff7be2e9f5def04b0bd49adf18828a2f2adb2c5366599c7fbf273a21c37bd558ba494600a2daf636652ea043cfb7169e04d193897eb234aa83ac248db9ae
-
SSDEEP
1536:61hb/tUB+/uQolOemOY1JFt1vK+wpANMVchGcW6VVcC/fouWcpOmbrS:ZB0XjeFKJFt1vfwpAnBrcCYBm6
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2076 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2076 AcroRd32.exe 2076 AcroRd32.exe 2076 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\05bfe2de09e515610ceed265ef605583_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2076
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d17657b91b6b8dc3e7966e3cf9ed226c
SHA1dba961e61a4bb68f7c9e49d0ed5802334179d1ae
SHA25633f94998031904d5efe47fd68ea5e573c8fd83ef4f75d28bbde5b0d2bb9b0e98
SHA512b045e6f03b42ed5ef9079522f059ed5ffaf841662e56a2ca1685375d65f6aa1163f94fce8991806c937b375f59b47e98215c3872ec00a59922f8abf94b662e28